CVE-2012-4960
published 2013-06-20CVE-2012-4960: The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S2300, S3300, S5300…
PriorityP335medium6.5CVSS 2.0
AVNACLAuSCPIPAP
EXPLOIT
EPSS
3.45%
87.7th percentile
The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S2300, S3300, S5300, S3300HI, S5300HI, S5306, S6300, S2700, S3700, S5700, S6700, AR G3, H3C AR(OEM IN), AR 19, AR 29, AR 49, Eudemon100E, Eudemon200, Eudemon300, Eudemon500, Eudemon1000, Eudemon1000E-U/USG5300, Eudemon1000E-X/USG5500, Eudemon8080E/USG9300, Eudemon8160E/USG9300, Eudemon8000E-X/USG9500, E200E-C/USG2200, E200E-X3/USG2200, E200E-X5/USG2200, E200E-X7/USG2200, E200E-C/USG5100, E200E-X3/USG5100, E200E-X5/USG5100, E200E-X7/USG5100, E200E-B/USG2100, E200E-X1/USG2100, E200E-X2/USG2100, SVN5300, SVN2000, SVN5000, SVN3000, NIP100, NIP200, NIP1000, NIP2100, NIP2200, and NIP5100 use the DES algorithm for stored passwords, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.
Affected
107 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| huawei | acu | — | — |
| huawei | acu | — | — |
| huawei | acu | — | — |
| huawei | ar_19_29_49 | <= r2207 | — |
| huawei | ar_g3 | — | — |
| huawei | ar_g3 | — | — |
| huawei | ar_g3 | — | — |
| huawei | atn | — | — |
| huawei | atn | — | — |
| huawei | cx200 | — | — |
| huawei | cx300 | — | — |
| huawei | cx600 | — | — |
| huawei | cx600 | — | — |
| huawei | cx600 | — | — |
| huawei | cx600 | — | — |
| huawei | e200_usg2200 | <= v200r003c00 | — |
| huawei | e200_usg5100 | <= v200r003c00 | — |
| huawei | e200e-b | <= v100r005c01 | — |
| huawei | e200e-c | <= v200r003c00 | — |
| huawei | e200e-usg2100 | <= v100r005c01 | — |
| huawei | e200e-x1 | <= v100r005c01 | — |
| huawei | e200e-x2 | <= v100r005c01 | — |
| huawei | e200x3 | <= v200r003c00 | — |
| huawei | e200x5 | <= v200r003c00 | — |
| huawei | e200x7 | <= v200r003c00 | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
2013-06-20
Published